home

jcrea450_setup.exe

Xinox Software

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from jcreator-xinox-hrd.appspot.com and multiple other hosts.
Publisher:
Xinox Software

Description:
JCreator LE Setup

MD5:
ab0f01f7625bec05c2a2068201bf422d

SHA-1:
ca3e3680edfee26c632667a8b87293375febda80

SHA-256:
cd6ed9672f3cf2f81deee3e00f20404ad0d7d46c1124a9e65b7a3013cd10a46c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 9:32:21 AM UTC  (today)

File size:
3.8 MB (4,027,802 bytes)

Copyright:
Copyright © Xinox Software 2000-2008

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Language:
English (United States)

Common path:
C:\users\{user}\downloads\jcrea450_setup.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:MWyW1bY4RKcb5u+gXvdIlrJxwZb2tFguR/OJZV+zy6gMPqD4T6KeL:88Yp+wXXFGrLgutcV+OBT9L

Entry address:
0x9A54

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 72, 96, FF, FF, E8, 79, A8, FF, FF, E8, A4, CA, FF, FF, E8, EB, CA, FF, FF, E8, 12, F3, FF, FF, E8, 79, F4, FF, FF, 33, C0, 55, 68, 02, A1, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, CB, A0, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 9B, FE, FF, FF, E8, 06, FA, FF, FF, 8D, 55, F0, 33, C0, E8, B0, D0, FF, FF, 8B, 55, F0, B8, E4, CD, 40, 00, E8, 23, 97, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, E4, CD, 40, 00, B2, 01, B8...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
36.5 KB (37,376 bytes)

The file jcrea450_setup.exe has been seen being distributed by the following 24 URLs.

http://jcreator-xinox-hrd.appspot.com/.../activate?id=da9ec58f3f9c32ac865e2a215eeea3b6

https://jcreator-xinox-hrd.appspot.com/.../activate?id=24c04a3dff1e35e086080b5edeeefa19

http://jcreator-xinox.appspot.com/.../activate?id=81165bba11cd3114a7059a33617e1f49

https://www.google.com/url?hl=ar&q=http://www.jcreator.com/.../jcrea450_setup.exe&source=gmail&ust=1482158852125000&usg=AFQjCNFt0JkSDhHlLYpdVu738Llk-JcdwQ

https://jcreator-xinox.appspot.com/.../activate?id=9560a50195453d8bb3b70600b47661bf

https://www.google.com/url?hl=en&q=http://www.jcreator.com/.../jcrea450_setup.exe&source=gmail&ust=1478966359327000&usg=AFQjCNH7Kh4ZLxbarePCcTsK4xijxozqaQ

https://www.google.com/url?hl=en&q=http://www.jcreator.com/.../jcrea450_setup.exe&source=gmail&ust=1472593238901000&usg=AFQjCNE7QZXQiD897ZlJD1Z5FGQcoeFLhQ

https://lms.kku.edu.sa/bbcswebdav/.../xid-13891153_2

https://jcreator-xinox.appspot.com/.../activate?id=37525ff7400f37cd89146513892875ea

https://www.google.com/url?hl=en-GB&q=http://www.jcreator.com/.../jcrea450_setup.exe&source=gmail&ust=1476451886002000&usg=AFQjCNFkwbPuWLFof6TdRmmxu_d2cUWWFA

https://lms.kku.edu.sa/bbcswebdav/.../xid-12427909_2

https://www.google.com/url?hl=en&q=http://www.jcreator.com/.../jcrea450_setup.exe&source=gmail&ust=1478192381857000&usg=AFQjCNGb5-nz-xfwoP486CY0OWaDu8t59g

http://jcreator-xinox-hrd.appspot.com/.../activate?id=6b05bc41ac2f36deadc7b90ad5b0f652

https://www.google.com/url?hl=zh-CN&q=http://www.jcreator.com/.../jcrea450_setup.exe&source=gmail&ust=1470685211012000&usg=AFQjCNGaXgmoFGUWw6ypNse3WBOUWuizlw

https://doc-04-c8-docs.googleusercontent.com/docs/securesc/ka88gevfsuspo0ubtta05ta580ptfie9/bsqn2ibo5mplokji3b165qa5g0tut56d/1472076000000/17201159865424728345/.../0B9zMmDoit_VdSlo4TmN3TVFOTjQ?e=download

https://jcreator-xinox-hrd.appspot.com/.../activate?id=1266477a8ef33ca381c0845780a8d00e

https://docs.google.com/uc?authuser=0&id=0Bwzut8DEL4X_UmdWQnpBMzJYSE0&export=download

http://jcreator-xinox-hrd.appspot.com/.../activate?id=cb28ccb0c55b3557988cae264b92ea50

https://e-uczelnia.uek.krakow.pl/mod/.../view.php?id=48308

http://jcreator-xinox-hrd.appspot.com/.../activate?id=79e5d3c45da43b86836dda8f1f666ae7

http://www.jcreator.com/.../jcrea450_setup.exe

http://jcreator-xinox.appspot.com/.../activate?id=ebfcf7b4b4b4340987e628999cd94f15

http://www.jcreator.com/.../jcrea450_setup.exe

http://jcreator-xinox.appspot.com/.../activate?id=3d584fbd41fb3cfd86ab9206b4e15c8c

Scan jcrea450_setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.